apache - How to ensure that clients are able to connect to a SSL connection with Strong Cipher -


i have website , various clients(web , mobile) access it. have used following ciphersuite

sslciphersuite all:!adh:!export56:rc4+rsa:+high:+medium:+low:+sslv2:+exp:+enull 

but ciphersuite accepts low ciphers , sslv2 can lead security issues. used following ciphersuite

sslciphersuite all:!anull:!adh:!enull:!low:!exp:rc4+rsa:+high:+medium sslprotocol -sslv2 

but how can ensure clients able access website. there other way maintain security of server?

i'm using

    sslciphersuite rc4-sha:high:!adh 

which supposed mitigate beast attack.


Comments